Command Injection Vulnerability in ZTE ZENIC ONE R58 Products
CVE-2024-22063

9CRITICAL

Key Information:

Vendor

Zte

Vendor
CVE Published:
30 December 2024

What is CVE-2024-22063?

The ZTE Corporation's ZENIC ONE R58 products exhibit a vulnerability that allows an authenticated attacker to perform command injection. By exploiting this flaw, an attacker can manipulate messages and inject harmful code into the system. This exploitation can lead to further attacks on other devices linked to the compromised system, creating a significant security risk. Immediate patching and vulnerability management are crucial for safeguarding the integrity of affected systems.

Affected Version(s)

ZENIC ONE R58 0

References

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-22063 : Command Injection Vulnerability in ZTE ZENIC ONE R58 Products